[Full-disclosure] FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts



-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Foresight Linux Essential Advisory: 2008-0006-1
Published: 2008-02-11

Rating: Minor

Updated Versions:
tetex=/conary.rpath.com@rpl:devel//1/2.0.2-28.10-1
tetex-dvips=/conary.rpath.com@rpl:devel//1/2.0.2-28.10-1
tetex-fonts=/conary.rpath.com@rpl:devel//1/2.0.2-28.10-1
group-dist=/foresight.rpath.org@fl:1-devel//1/1.4.2-0.7-3

References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4033
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5935
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5936
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-5937
http://wiki.rpath.com/Advisories:rPSA-2007-0266
http://wiki.rpath.com/Advisories:rPSA-2008-0007

Description:
Previous versions of the tetex package are vulnerable to multiple issues,
the worst of which is believed to allow arbitrary code execution via
user-assisted vectors when dvips or dviljk are run of specially-crafted
files, or when loading malformed font data using t1lib.

- ---

Copyright 2008 Foresight Linux Project
This file is distributed under the terms of the MIT License.
A copy is available at http://www.foresightlinux.org/permanent/mit-license.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.8 (GNU/Linux)
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=HmPT
-----END PGP SIGNATURE-----

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



Relevant Pages

  • [Full-disclosure] FLEA-2007-0057-1 pidgin
    ... Foresight Linux Essential Advisory: 2007-0057-1 ... Rating: Minor ... Previous versions of the pidgin package are vulnerable to a Denial of ... Copyright 2007 Foresight Linux Project ...
    (Full-Disclosure)
  • [Full-disclosure] FLEA-2007-0062-1 firefox
    ... Foresight Linux Essential Advisory: 2007-0062-1 ... Rating: Major ... or malicious sites to run arbitrary code as the user running firefox. ... Copyright 2007 Foresight Linux Project ...
    (Full-Disclosure)
  • FLEA-2008-0006-1 tetex tetex-dvips tetex-fonts
    ... Foresight Linux Essential Advisory: 2008-0006-1 ... Rating: Minor ... Previous versions of the tetex package are vulnerable to multiple issues, ... Copyright 2008 Foresight Linux Project ...
    (Bugtraq)
  • FLEA-2007-0057-1 pidgin
    ... Foresight Linux Essential Advisory: 2007-0057-1 ... Rating: Minor ... Previous versions of the pidgin package are vulnerable to a Denial of ... Copyright 2007 Foresight Linux Project ...
    (Bugtraq)
  • [Full-disclosure] FLEA-2007-0023-1: firefox
    ... Rating: Major ... Previous versions of the firefox package are vulnerable to several types of ... Copyright 2007 Foresight Linux Project ... Portions Copyright 2007 rPath, Inc. ...
    (Full-Disclosure)